4.7
CVE-2023-51712
- EPSS 0.04%
- Published 05.09.2024 16:15:06
- Last modified 25.03.2025 17:15:44
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
An issue was discovered in Trusted Firmware-M through 2.0.0. The lack of argument verification in the logging subsystem allows attackers to read sensitive data via the login function.
Data is provided by the National Vulnerability Database (NVD)
Arm ≫ Trusted Firmware-m Version <= 2.0.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.04% | 0.126 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 4.7 | 0.3 | 4 |
CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 4.7 | 0.3 | 4 |
CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
|